Title: An Application of Pattern Matching in Intrusion Detection
Authors: Sandeep Kumar  Eugene H. Spafford   
File name:pubdocintrusion_detectionkumar-spaf-overview.ps.Z 
File size:258682 bytes 

Abstract: This report examines and classifies the
characteristics of signatures used in misuse intrusion detection.
Efficient algorithms to match patterns in some of these classes
are described. A generalized model for matching intrusion
signatures based on Colored Petri Nets is presented, and some of
its properties are derived.